← Database

CVE-2021-42550

MEDIUM CVSS: 6.6 Published: 2021-12-16 Modified: 2026-06-17

Description

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.

Affected Platforms

Qos LogbackSiemens Sinec NmsNetapp Cloud ManagerRedhat SatelliteNetapp Snap Creator FrameworkNetapp Service Level Manager

Weakness Type

CWE-502, CWE-502

References